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4. (Amended) Computing apparatus according to claim 1, wherein 
the authorised token is a crypto token programmed to encrypt, 
decrypt or sign data, and the secure process is arranged to 
transmit data to the crypto token to be encrypted, decrypted or 
signed and receive encrypted, decrypted or signed data from the 
crypto token . 

5. (Amended) Computing apparatus according to claim 1, 
arranged, only if the different token is an authorised auxiliary 
token, to allow the user to interact with the secure process. 

6. (Amended) Computing apparatus according to claim 1, further 
comprising timer means programmed with a timeout period, 
wherein, in the event the different token is an authorised 
auxiliary token, the computing apparatus resets the timer and 
continues operation until the timeout period expires, after 
which time the computing apparatus suspends any interactions 
between the secure process and either or both the user and the 
authorised auxiliary token. 

8. (Amended) Computing apparatus according to claim 1, 
arranged to permit interaction between the secure process and 
only one authorised auxiliary token after removal of the primary 
token . 

9. (Amended) Computing apparatus according to claim 1, 
arranged to permit interaction between the secure process and 
more than one authorised auxiliary token after removal of the 
primary token. 

10. (Amended) Computing apparatus according to claim 1, 
wherein the processing means comprises a main processing unit 
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and a secure processing unit and the memory means comprises main 
memory and secure memory. 

13. (Amended) Computing apparatus according to claim 1, 
wherein the primary token comprises a smart card, and the 
interface means is configured to receive a smart card. 

14. (Amended) Computing apparatus according to claim 1, 
wherein the auxiliary token information is stored in a user 
profile. 

17. (Amended) A method according to claim 15, wherein the 
computing apparatus interaction with the authorised auxiliary 
token for a limited period of time. 

18. (Amended) A method according to claim 15, wherein the 
computing apparatus only permits interaction with one authorised 
auxiliary token after removal of the primary token. 

19. (Amended) A method according to claim 15, wherein the 
computing apparatus permits interaction with plural authorised 
auxiliary tokens after removal of the primary token. 

Please cancel Claims 20-21 without prejudice. 

Please add the following new claims: 

22. (New) Computing apparatus comprising: 

one or more memories adapted to store the instructions of a 
secure process and an authentication process; 

one or more processors arranged to control the operation of 
the computing apparatus including by executing the secure 
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process and the authentication process; 

a user interface arranged to receive user input and return 
to the user information generated by the one or more processors 
in response to the user input; and 

a token reader interface for receiving and communicating 
with a removable token, the token having a token memory storing 
token data including information for identifying the token and 
auxiliary token information identifying one or more authorized 
auxiliary tokens, 

wherein the one or more processors are arranged to receive 
the identity information and the auxiliary token information 
from a primary token received in the token reader interface, 
authenticate the primary token using the authentication process 
and, if the primary token is successfully authenticated, permit 
a user to interact with the "secure process via the user 
interface, and wherein the processing means is arranged to 
repeatedly authenticate the primary token and cause the 
computing platform to suspend interaction between the secure 
process and the user if authentication is not possible as a 
result of the removal of the primary token unless the primary 
token is replaced by an authorized auxiliary token. 

23. (New) Computing apparatus according to claim 22, wherein 
the primary token comprises a token processor and the one or 
more processors are arranged to generate information 
representing the integrity of the computing apparatus and 
transmit the integrity information to the primary token, wherein 
the token processor is programmed to verify the integrity of the 
computing apparatus including by using the integrity 
information. 

24. (New) Computing apparatus according to claim 22, further 
comprising a timer programmed with a timeout period, wherein, in 
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the event the different token is an authorized auxiliary token, 
the computing apparatus resets the timer and continues operation 
until the timeout period expires, after which time the computing 
apparatus suspends any interactions between the secure process 
and either or both the user and the authorized auxiliary token. 

25. (New) Computing apparatus according to claim 24, arranged 
to recommence said interactions in the event the authorized 
auxiliary token is replaced by the primary token and the 
computing apparatus is able to authenticate the primary token. 

26. (New) Computing apparatus according to claim 22, wherein 
the one or more processors comprise a main processor and a 
secure processor and the one or more memories comprise a main 
memory and a secure memory. 

27. (New) Computing apparatus according to claim 26, wherein 
said computer apparatus comprises a trusted device incorporating 
the secure processor and the secure memory, wherein the trusted 
device is programmed to authenticate the primary token 
repeatedly. 

28. (New) Computing apparatus according to claim 27, wherein 
the trusted device is arranged to acquire an integrity metric of 
the computing apparatus, and the primary token is arranged to 
use the integrity metric on at least one occasion to verify the 
integrity of the computing apparatus. 



29. (New) Computing apparatus according to claim 22, wherein 
the primary token comprises a smart card, and the token reader 
interface is configured to receive a smart card. 



